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(57)Abstract: 

PROBLEM TO BE SOLVED: To reduce management cost and to 
facilitate maintenance management. 

SOLUTION: A controller 10 sets definition information for making 
classification items and analysis items of a log data base needed to 
analyze a log file, correspond to items of the log file in a log 
gathering rule setting process by using the field numbers of the log 
file. In a gathering process for the log file, a web server device 200 
is accessed, and the data of the log file are transferred via a 
network 300 and received. In a generating process and a storing 
process for the log data base, the definition information is referred . 
to according to the data of the received log file to calculate the 
statistic data of the analysis items by the classification items of the 
log data base, thereby generating a log data base including 
statistical data. In a data analyzing process and an output 
processing for its result, an analyzing process is carried out, on the 
basis of the generated log data base and data on the analysis result 
is generated and outputted. 




LEGAL STATUS 

[Date of request for examination] 

[Date of sending the examiner's decision of rejection] 
[Kind of final disposal of application other than the 
examiner's decision of rejection or application converted 
registration] 

[Date of final disposal for application] 
[Patent number] 
[Date of registration] 

[Number of appeal against examiner's decision of 
rejection] 

[Date of requesting appeal against examiner's decision of 
rejection] 

[Date of extinction of right] 



Copyright (C); 1998,2003 Japan Patent Office 



i\ AVOiQD 



Cop 



L- 



This Page Blank (uspto) 



* NOTICES * 



Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] Server management equipment to which two or more server equipments which are characterized by 
providing the following, and which have a log file of predetermined log file format, respectively were connected 
through a network A setting-out means to set up definition information for matching two or more provisions of 
classification and two or more analysis items of a log database required in order to analyze the above-mentioned log 
file with an item of the above-mentioned log file using a field number of the above-mentioned log file for every 
above-mentioned server equipment Means of communications which accesses each above-mentioned server 
equipment, transmits data of the above-mentioned log file to server management equipment through a network from 
each above-mentioned server equipment, and receives A generation means to generate a log database which 
contains the statistical data concerned by calculating a statistical data of each above-mentioned analysis item for 
every provisions of classification of the above-mentioned log database with reference to definition information by 
which setting out was carried out [ above-mentioned ] based on data of a log file by which reception was carried 
out [ above-mentioned ], and to memorize to the 1st storage An analysis means to perform analysis processing 
about an analysis item as which it was beforehand chosen of two or more above-mentioned analysis items over 
provisions of classification beforehand chosen among two or more above-mentioned provisions of classification 
based on a log database by which generation was carried out [ above-mentioned ], and to generate and output data 
of an analysis result 

[Claim 2] Server management equipment according to claim 1 characterized by providing the following. The above- 
mentioned setting-out means is the 2nd storage which memorizes the above-mentioned definition information 
beforehand about format of a predetermined log file. It is a means to read definition information by which storage 
was carried out [ above-mentioned ] from the 2nd storage of the above, and to set up as definition information over 
the server equipment concerned when definition information on format of an inputted log file is memorized by the 
2nd storage of the above based on format of a log file inputted for every above-mentioned server equipment. - 
[Claim 3] The above-mentioned analysis means is server management equipment according to claim 1 or 2 
characterized by having further the 1st selection means which chooses provisions of classification in the above- 
mentioned analysis processing from two or more provisions of classification which were able to be decided 
beforehand, and the 2nd selection means which chooses an analysis item in the above-mentioned analysis 
processing from two or more analysis items which were able to be decided beforehand. 

[Claim 4] A server management method for server management equipment to which two or more server equipments 
which are characterized by providing the following, and which have a log file of predetermined log file format, 
respectively were connected through a network A setting-out step which sets up definition information for matching 
two or more provisions of classification and two or more analysis items of a log database required in order to 
analyze the above-mentioned log file with an item of the above-mentioned log file using a field number of the 
above-mentioned log file for every above-mentioned server equipment A communication link step which accesses 
each above-mentioned server equipment, transmits data of the above-mentioned log file to server management 
equipment through a network from eachabpve-mentioned server equipment, and is received A generation step 
which generates a log database which contains the statistical data concerned by calculating a statistical data of 
each above-mentioned analysis item for every provisions of classification of the above-mentioned log database with 
reference to definition information by which setting out was carried out [ above-mentioned ] based on data of a log 
file by which reception was carried out [ above-mentioned ], and is memorized to the 1st storage An analysis step 
which performs analysis processing about an analysis item as which it was beforehand chosen of two or more 
above-mentioned analysis items over provisions of classification beforehand chosen among two or more above- 
mentioned provisions of classification based on a log database by which generation was carried out [ above- 
mentioned ], and generates and outputs data of an analysis result 

[Claim 5] A server management method according to claim 4 characterized by providing the following The above- 
mentioned setting-out step is a step which memorizes the above-mentioned definition information beforehand to 
the 2nd storage about format of a predetermined log file. It is the step which reads definition information by which 
storage was carried out [ above-mentioned ] from the 2nd storage of the above, and is set up as definition 
information over the server equipment concerned when definition information on format of an inputted log file is 
memorized by the 2nd storage of the above based on format of a log file inputted for every above-mentioned server 
equipment 

[Claim 6] The above-mentioned analysis step is a server management method according to claim 4 or 5 
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characterized by including further a step which chooses provisions of classification in the above-mentioned analysis 
processing from two or more provisions of classification which were able to be decided beforehand, and a step 
which chooses an analysis item in the above-mentioned analysis processing from two or more analysis items which 
were able to be decided beforehand. 

[Claim 7] A record medium which recorded a server manager characterized by recording a server manager including 
claim 4 thru/or a server management method of one of 6 publications. 



[Translation done.] 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

[0001] • 

[The technical field to which invention belongs] This invention relates to the record medium which recorded the 
server manager on the server management equipment and the method of collecting and managing the log file of two 
or more server equipments, such as for example, Web server equipment, and the list. 
[0002] 

[Description of the Prior Art] For example, in order to set to the intranet used by the in-house system and to offer 
and collect various kinds of information, Web of WWW (World Wide Web) is used. WWW builds a hypertext on a 
network, aims at making all information accessible without a joint, and is expressing the hypertext here using tag 
language called HTML. 

[0003] In order to use this WWW and to offer and collect various kinds of information, Web server equipment is 
formed on intranet. And the Web server program performed with this Web server equipment and other application 
programs generate and store various kinds of log files which are the hysteresis information concerning the program 
execution concerned. 

[0004] Since these log files become a huge amount, the software for the log file analysis for analyzing this is used. 
However, when analyzing a log file using the software for this log file analysis, there was a trouble that the software 
concerned could treat only the log file of a specific Web server program. Moreover, in order to collect log files 
including all items to the computer which manages a data base, there was a trouble of pressing the hard disk 
memory of the machine for analysis. 

[0005] It is indicating generating the normalized log data which arranges the value of the data item which started the 
value corresponding to the data item beforehand defined by JP,10-293704,A (henceforth the conventional example) 
from the log data in the log file made into the object of a monitor in each agent's Web server equipment in order to 
solve this trouble, and was specified, and transmitting the generated normalization log data to the computer which 
performs a manager's function through a network. 
[0006] 

[Problem(s) to be Solved by the Invention] However, in the conventional example, since the analysis program only 
for each used with management equipment needed to be created for every Web server equipment which has the log 
file of different specification, the great costs for programmings occurred (for example, about 3 million yen /1 server 
equipment), and there was a trouble that management cost became large. Moreover, since the software of 
dedication was used with each Web server equipment, when [, such as the version up, ] maintenance control was 
carried out, it needed to go to each Web server equipment, and there was a trouble that maintenance control was 
complicated. 

[0007] It is in the object of this invention offering the record medium with which the above trouble could be solved, 
management cost could be reduced as compared with the conventional example, and maintenance control moreover 
recorded the 'server manager on easy server management equipment and an easy method, and the list. 
[0008] 

[Means for Solving the Problem] Server management equipment according to claim 1 concerning this invention In 
server management equipment to which two or more server equipments which have a log file of predetermined log 
file format/respectively were connected through a network Two or more provisions of classification and two or more 
analysis items of a log database required in order to analyze the above-mentioned log file A setting-out means to 
set up definition information for matching with an item of the above-mentioned log file for every above-mentioned 
server equipment using a field number of the above-mentioned log file. Means of communications which accesses 
each above-mentioned server equipment, transmits data of the above-mentioned log file to server management 
equipment through a network from each above-mentioned server equipment, and receives, Based on data of a log 
file by which reception was carried out [ above-mentioned ], by calculating a statistical data of each above- 
mentioned analysis item for every provisions of classification of the above-mentioned log database with reference 
to definition information by which setting out was carried out [ above-mentioned ] A generation means to generate 
a log database containing the statistical data concerned, and to memorize to the 1st storage, Based on a log 
^database by which generation was carried out [ above-mentioned ], analysis processing about an analysis item as 
which it was beforehand chosen of two or more above-mentioned analysis items over provisions of classification 
beforehand chosen among two or more above-mentioned provisions of classification is performed. It is characterized 
by having an analysis means to generate and output data of an analysis result. 
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[0009] Moreover, it sets to server management equipment according to claim 2. In server management equipment 
according to claim 1 the above-mentioned setting-out means The 2nd storage which memorizes the above- 
mentioned definition information beforehand about format of a predetermined log file, When definition information on 
™ format of an inputted log file is memorized by the 2nd storage of the above based on format of a log file inputted for 
every above-mentioned server equipment It is characterized by having read definition information by which storage 
was carried out [ above-mentioned ] from the 2nd storage of the above, and having a means to set up as definition 
information over the server equipment concerned. 

[0010] Furthermore, in server management equipment according to claim 3, it carries out that the above-mentioned 
analysis means was further equipped with the 1st selection means which chooses provisions of classification in the 
above-mentioned analysis processing from two or more provisions of classification which were able to be decided 
beforehand, and the 2nd selection means which chooses an analysis item in the above-mentioned analysis 
processing from two or more analysis items which were able to be decided beforehand as the feature in server 
management equipment according to claim 1 or 2. 

[001 1] In a server management method according to claim 4 concerning this invention In a server management 
method for server management equipment to which two or more server equipments which have a log file of 
predetermined log file format, respectively were connected through a network Two or more provisions of 
classification and two or more analysis items of a log database required in order to analyze the above-mentioned log 
file A setting-out step which sets up definition information for matching with an item of the above-mentioned log file 
for every above-mentioned server equipment using a field number of the above—mentioned log file, A communication 
link step which accesses each above-mentioned server equipment, transmits data of the above-mentioned log file 
to server management equipment through a network from each above-mentioned server equipment, and is received, 
Based on data of a log file by which reception was carried out [ above-mentioned ], by calculating a statistical data 
of each above-mentioned analysis item for every provisions of classification of the above-mentioned log database 
with reference to definition information by which setting out was carried out [ above-mentioned ] A generation step 
which generates a log database containing the statistical data concerned, and is memorized to the 1st storage. 
Based on a log database by which generation was carried out [ above-mentioned ], analysis processing about an 
analysis item as which it was beforehand chosen of two or more above-mentioned analysis items over provisions of 
classification beforehand chosen among two or more above-mentioned provisions of classification is performed. It 
considers as the including [ an analysis step which generates and outputs data of an analysis result ] feature. 
[0012] Moreover, it sets to a server management method according to claim 5. In a server management method 
according to claim 4 the above-mentioned setting-out step A step which memorizes the above-mentioned definition 
information beforehand to the 2nd storage about format of a predetermined log file, When definition information on 
format of an inputted log file is memorized by the 2nd storage of the above based on format of a log file inputted for 
every above-mentioned server equipment It is characterized by reading definition information by which storage was 
carried out [ above-mentioned ] from the 2nd storage of the above, and including a step set up as definition 
information over the server equipment concerned. 

[001 3] Furthermore, in a server management method according to claim 6, the above-mentioned analysis step is 

characterized by including further a step which chooses provisions of classification in the above-mentioned analysis 

processing from two or more provisions of classification which were able to be decided beforehand, and a step 

which chooses an analysis item in the above-mentioned analysis processing from two or more analysis items which 

were able to be decided beforehand in a server management method according to claim 4 or 5. 

[0014] A record medium which recorded a server manager according to claim 7 concerning this invention is 

characterized by recording a server manager including claim 4 thru/or a server management method of one of 6 

publications. 

[0015] 

[Embodiment of the Invention] Hereafter, the operation gestalt which starts this invention with reference to a 
drawing is explained. 

[0016] Drawing 1 is the block diagram showing the configuration of the server managerial system which is 1 
operation gestalt concerning this invention. Two or more Web server equipments 200-1 with which the server 
managerial system of this operation gestalt stores the log file of predetermined log file format in the log file memory 
51, respectively thru/or 200-N (hereafter, it names generically and gives with 200.), It has the Web server equipment 
200 of these plurality, and server management equipment 100 which is connected through the networks 300, such 
as networks for in the company, such as WAN and LAN, and performs server management processing of two or 
more Web server equipments 200, and is constituted. Here the controller 10 of server management equipment 100 
After performing beforehand log collection rule setting-out processing of (a) drawing 2 , and analysis rule setting-out 
processing of (b) drawing 3 based on directions of an operator, as shown in drawing 4 , according to the collection 
schedule set up by the above-mentioned log collection rule setting-out processing (c) Log file collection processing 
(step S12) and (d) log database generation processing (step S13), (e) It is characterized by performing log database 
storing processing (step S14), (f) date analysis processing (step S15), and (g) date analysis result output processing 
(step S16). 

[0017] With each Web server equipment 200, in order to use the various software for server equipments which 
generates a log file and to generate a common log database especially with this operation gestalt based on the log 
file of two or more Web server equipments 200, it is characterized by performing the following processings. In the 
above-mentioned log collection rule setting-out processing, the definition information for matching two or more 
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provisions of classification and two or more analysis items (specifically item of drawing 6 ) of a log database required 
in order to analyze a log file with the item of the above-mentioned log file using the field number of the above- 
mentioned log file is set up every Web server equipment 200, and a controller 10 stores it in the setting-out 
information memory 22. Here, based on the default definition information in the default definition information memory 
21, the log file format of desired Web server equipment 200 can be specified, without an operator specifying the 
above-mentioned field number, when specifying default log file format Subsequently, in the above-mentioned log file 
collection processing (step S12 of drawing 4 ). each Web server equipment 200 is accessed, and the data of the 
above-mentioned log file is transmitted to server management equipment 100 through a network 300 from each Web 
server equipment 200, and it receives. Furthermore, in log database generation processing (step S13) and log 
database storing processing (step S14), by calculating the statistical data of each above-mentioned analysis item 
for every provisions of classification of the above-mentioned log database with reference to the definition 
information by which setting out was carried out [ above-mentioned ] based on the data of the log file by which 
reception was carried out [ above-mentioned ], the log database containing the statistical data concerned is 
generated, and it stores in log data Base Memory 23 in the hard disk memory 13. Furthermore, in date-analysis 
processing (step S15) and date-analysis result output processing (step S16), based on the log database by which 
generation was carried out [ above-mentioned ], analysis processing about the analysis item as which it was 
beforehand chosen of two or more above-mentioned analysis items over the provisions of classification beforehand 
chosen among two or more above-mentioned provisions of classification is performed, and the data of an analysis 
result is generated, and it outputs to CRT display 33 and a printer 34, and it displays and prints. 
[0018] In drawing 1 each Web server equipment 200 (a) For example, the controller 50 for controlling actuation of 
Web server equipments, such as homepage information expressed using HTML, data reception processing, and data 
transfer processing, (b) Log file memory 51 which is connected to a controller 50, generates the hysteresis (history) 
performed with the Web server equipment 200 concerned by the controller 50, and is stored as a log file, (c) It has 
the communication link interface 52 which performs processing of the signal transformation for connecting with a 
controller 50 and performing the bidirectional communication link of data transfer etc. through server management 
equipment 100 and a network 300, a signal strange recovery, etc. Here, in a controller 50, it is Windows. For 
example, (a) Microsoft which is the server administrative application program performed on OS's, such as NT 
Internet Information Server, (b) National Center for Supercomputing Application and (c) Oracle Web Application 
Server3.0*# is installed and performed. The hysteresis (history) performed with the Web server equipment 200 
concerned by this is generated by the controller 50, and is stored in the log file memory 51 as a log file, and the log 
file concerned is transmitted to a controller 10 by directions by FTP from server management equipment 100 
through the communication link interface 30 in the communication link interface 52, a network 300, and server 
management equipment 100 from a controller 50. 

[0019] Server management equipment 100 consists of CPUs, and is equipped with the controller 10 which performs 
server management processing including log file management processing. Here, a controller 10 is connected to two 
or more Web server equipments 200 through the communication link interface 52 and network 300 which perform 
processing of the signal transformation for performing the bidirectional communication link of data transfer etc., a 
signal strange recovery, etc. ROM 11 which stores OS program and the processing program of the server 
management processing including log file management processing, RAMI 2 which operates as the main memory 
(working memory) and temporary storage memory of a controller 10, and the hard disk memory 13 which stores 
various data are connected to a controller 10 through a bus 20. Moreover, the timer 14 which clocks current time is 
connected to a controller 10. Here, the hard disk memory 13 is equipped with the default definition information 
memory 21, the setting-out information memory 22, log data Base Memory 23, the analysis rule memory 24, and the 
analysis result memory 25. Furthermore, as a data entry unit, while a keyboard 31 and a mouse 32 are connected, 
CRT display 33 and a printer 34 are connected to a controller 10 as data output equipment 

[0020] With this operation gestalt as shown in step S3 of drawing 2 , as a default Web server program used with 
each Web server equipment 200 (a) Microsoft Internet Information Server, (b) National Center for Supercomputing 
Application (NCSA), And three software of (c) Oracle Server3.0** Web (it is hereafter called default software.) 
Application Although specified, the software of other classes is also usable. The log file format of these three 
default software is shown in the following tables. In these tables, the ascending order of the field number from 1 
when transmitting each log file in the form of FTP has indicated the item. That is, the IP address of a client is the 
field number 1 in a table 1, and the user name is the field number 2, and is the same as that of the following. In 
addition, in the -following tables, although the client is not illustrated by drawing 1 , it is the computer of the 
connection origin which it connects with each Web server equipment 200, and is accessed. 
[0021] 
[A table 1] 

Microsoft IIS standard log file format (one of the format used by Internet Information Server (IIS) made from 
Microsoft) 

- — A item Explanation IP address of 

a client The IP address client user name of a connecting agency machine User name date of a connection former 
machine The connected date time of day Connected time-of-day service name The demanded service name is 
displayed. 

For example, WWW (W3SVC), FTP, A Gopher computer name IP address of the computer name server equipment of 
server equipment The IP address processing time of server equipment (ms) The time amount by which the demand 
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of connection is processed For example, receiving byte counts, such as the transfer time of an image The amount- 
of-information transmitting byte count which a server receives from the machine of a connecting agency It 
transmits to a connecting agency machine from server equipment. Amount of information For example, service state 
codes, such as size of an image The error code defined by the specification of WWW For example, a 200:connection 
success, 404 : A Windows NT condition code — there is no applicable page — A code actuation name original with 
NT The command name from a connecting agency to a server to demand For example, objects for actuation, such 
as POST and GET The file name which a connecting agency requires, A program and a parameter name are 

displayed. The example of an output of IIS standard log file format (Note) 

(I) 172.23.xxx.128, - 98/11/26, 0:51:35, W3SVC, DMC2.1 72.21. yy.226, 203. 380, 877, 200 and 0, 

GET, /enegi/Gif/mente.gif, - (II) 172.23.xxx.128, - 98/11/26, 0:51:36, W3SVC, DMC2.1 72.21. zz.226, 94, 453 and 

2244, yyyO and GET, /Scripts/counter/countexe, df^enegi.dat, 1 72.21 (III).xx.l 66, administrator, and 98/11/26, 

4:00:43. MSFTPSVC. DMC2, - 0, 20 and 0, zz, 0, and [1741] USER, administrator - [0022] 

[A table 2] 

NCSA joint log file format A item Explanation 

IP address of a client The IP address of a connecting agency machine Or computer name time 
Connection time For example [dd/mm/yyyy:hourminutes:seconds GMT offset] 

Request (object for actuation name + actuation) The command name which a connecting agency requires, A file 
name and a program, Altogether a parameter etc. A service state code The error code defined by the specification 
of WWW For example, 200 : A connection success, 404: Transmitting byte count — there is no applicable page — 
Amount of information transmitted to a connecting agency machine from a server For example, reference pass, such 

as size of an image Pass Server Name of the file referred to by URI WWW Server Name 

The example of an output of NCSA joint log file format (Note) (I) "1 72.23.xxx.1 28, 

[19/Sep/1 995:1 5:1 9:07-0500], "GET/images/icon.gif HTTP/1 .0", 200 and 1656, http://aboutus/", and "NCSA 
Mosaic/2.7b1 (X1 1 ;IRIX5.3IP22) Iibwww/2.1 2modified" [0023] 
[A table 3] 

Oracle Web Application Server3.0 log-file format (the item of the log file which Web Application Server3.0 (Web 
server made from Oracle) outputs is chosen from the following items by the manager of a server.) 

A j tem Explanation DNS name of 

a client IP address of the domain name client of a connecting agency machine Authentication ID of the IP address 
client of a connecting agency machine The case where it requests to contents with authentication User name time 
Connection time For example [dd/mm/yyyy:hourminutes:seconds GMToffset] 

Request (object for actuation name + actuation) The command name which a connecting agency requires, A file 
name and a program, Altogether a parameter etc. A service state code The error code defined by the specification 
of WWW For example, 200 : A connection success, 404 : A transmitting byte count — there is no applicable page — 
Transmit to a connecting agency machine from server equipment. Amount of information For example, transaction 
dates, such as size of an image Transaction completion date transaction time amount The transaction completion 
time amount processing time The DNS name of the time amount server equipment which connection took IP 
address of the domain name server equipment of server equipment The IP address comment of server equipment 
Comment actuation name added to a service state code The demand to a server from a connecting agency is 
displayed. For example, objects for actuation, such as POST and GET (body) From the character string which a 
connecting agency requires The thing except a parameter name For example, a file name / object for program name 
actuation (question section) From the character string which a connecting agency requires The thing except a file 

name/program name For example, a parameter train (Note) Oracle Web 

Application Example of Server3.0 log-file format (when Client IP, a user name, time, an actuation name, a service 
state code, and a transmitting byte count are chosen from the above-mentioned field) 

(I) 1 92.xxx.29.35-[03-/Jun/1 998: 15:09:07 +0900] "GET/ogHmg/help ico.gif HTTP/1.0" 200 891 (II) 1 92.1 68.yy.35- 

[03/Jun/1 998:1 5:09:07+0900]"GET/og-img/title a. gif HTTP/ 1 .0" 200 8349 (III) 1 92.1 68.zz.35- 

[03/Jun/1 998:1 5:09:1 5+0900]"POST/garireo/plsql/shohin.a kiki HTTP/1 .0"200 1623[0024] And the default 

definition information over the three above-mentioned default software is beforehand stored in the default definition 

memory 21, as shown in the following tables. 

[0025] 

[A table 4] 

An example of default definition information ; item IIS NCSA Oracle 

Server IP 7 - The 1 2 client IP 1 1 With two day 3 - - Time of day 4 - - time - 2 

Four requests 13 14 3 5 transmitting byte count 105 7 [0026] The 

definition information for matching the item (provisions of classification and analysis item) of a log database required 
in order to analyze a log file for every default software with the item of the above-mentioned log file in the default 
definition information in the default definition information memory 21 using the field number of a log file is stored so 
that clearly from a table 4. Processing of assignment of the field number in step S4 be omissible , and if an operator 
choose default log file format as show in step S3 of drawing 2 when Web server equipment 200 to set up be use 
default software , a controller 10 will read the definition information which correspond from the default definition 
information memory 21 , and will set it as the setting out information memory 22 with this operation gestalt at this 
time . Thereby, actuation of setting out is simplified and operability is raised. 

[0027] In the hard disk memory 13, the setting-out information memory 22 stores the setting-out information which 
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is the log collection rule by which log collection rule setting out is carried out Log data Base Memory 22 stores the 
log database generated by log database generation processing. As a log database shows the example to drawing 6 , 
the (a) date, (b) time of day, the (c) (servers IP and d) client IP, and the (e) site are beforehand chosen as provisions 
of classification, and the number of (f) hits, (g) transmitting byte count, and (h) processing time are beforehand 
chosen as an analysis item. Moreover, the analysis rule memory 24 stores the analysis item and provisions of 
classification corresponding to the axis of ordinate and horizontal axis of an analysis result which are set up in 
analysis rule setting-out processing, respectively, as shown in drawing 3 . Furthermore, the analysis result memory 
25 stores the data of the processing result of date analysis processing. 

[0028] With this operation gestalt, although the log database of drawing 6 is used, you may change about provisions 
of classification or an analysis item, and server management equipment 100 may be equipped with the processing 
program for modification. 

[0029] Drawing 2 is the front view showing an example of the display screen in the flow chart which shows the log 
collection rule setting-out processing performed by the controller 10 of drawing 1 , and CRT display 33 at the time 
of setting out In drawing 2 , the IP address of the Web server equipment 200 which has a log file is first inputted at 
step S1 using a keyboard 31, and when transmitting a log file to server management equipment 100 in the form of 
FTP from Web server equipment 200 at step S2, ID and the password when accessing Web server equipment 200 
are entered using a keyboard 31. Subsequently, at step S3, while inputting the directory of a log file, and a file name 
using a keyboard 31, log file format is set up using a mouse 32. At the time of default software, it chooses from 
three above-mentioned default software. On the other hand, when it is not default software, others are clicked and 
it progresses to step S4. 

[0030] In step S4, while Web server equipment 200 is using software other than default software, the definition 
information on log file format is set up. With this operation gestalt, the field number in the data when being 
transmitted by FTP is specified for every provisions of classification and analysis item as mentioned above. In 
addition, about time, it specifies in date + time of day and time, and chooses from the format that the format was 
able to be beforehand decided with the field number, about time here. Moreover, a request expresses for [ to 
analyze / a concrete actuation name or for actuation ] so that clearly from a table 1 thru/or a table 3. The example 
of the format of this request is shown in the following table. 
[0031] 
[A table 5] 

The example of the format of a request "The object for actuation name 

(POST/GET) actuation" -> example : "GET/images/water.gif" - "? 

parameter for actuation name (POST/GET) actuation" -> example : "POST/cgi-bin/conuntcgi?number=2" 

" ? p arame ter for actuation name (POST/GET) actuation, and a protocol name" -> 

example : "POST/cgi-bin/countcgi?number=2, HTTP/1.0" [0032] If setting 

out is completed by step S4, O.K. will be returned to step S3, if a mouse 32 is clicked. If setting out of step S3 is 
completed, a collection schedule will be set up at step S5, and if O.K. is clicked, a controller 10 will perform server 
management processing including log file management processing. The setting-out information set up by the above 
log collection rule setting-out processing is stored in the setting-out information memory 22. 

[0033] Drawing 3 is a graph which shows the display screen at the time of setting out of the analysis rule setting- 
out processing performed by the controller 10 of drawing 1 , and an example of an analysis result This analysis rule 
setting-out processing is good in a line, after log database storing processing (step S14) of drawing 4 is completed 
in advance of server management processing. While an analysis result as date analysis processing (step S15) 
performed and shown in the right-hand side of drawing 3 by clicking O.K. shown in drawing 3 in the case of the latter 
is displayed on CRT display 33, a printout is carried out to a printer 34. 

[0034] In drawing 3 , by analysis rule setting-out processing, while inputting a collection period using a keyboard 31, 
it sets up by clicking the item of horizontal-axis ****** of the analysis result corresponding to provisions of 
classification and an analysis item using a mouse 32, respectively. In drawing 3 , it is the item to which a black 
rectangular head and a black black dot were set Furthermore, IP and the site (with this operation gestalt, the 
directory in which a file is stored in URL of WWW is pointed out.) of the server which analyzes The item transmitted 
by FTP corresponds to a request, for example, is an object for actuation name + actuation. It sets up using a 
keyboard 31. The setting-out item set up by the above analysis rule setting-out processing is stored in the analysis 
rule memory 24. 

[0035] Drawing 4 is a flow chart which shows the log file management processing performed by the controller 10 of 
drawing 1 . In drawing 4 , it is judged first whether it is the setting-out time of day set up by schedule setting out 
based on the total chronaxie of the current time of a timer 14 at step S1 1, and when it is collection setting-out time 
of day, log file collection processing is performed in step S12. Based on the setting-out information stored in the 
setting-out information memory 22, a controller 10 accesses each Web server equipment 200, and, specifically, 
transmits and receives the data of the above-mentioned log file from each Web server equipment 200 to server 
management equipment 100 through a network 300 by FTP. Subsequently, with reference to the definition 
information by which performed log database generation processing and setting out was carried out [ above- 
mentioned ] at step S13 based on the data of the log file by which reception was carried out [ above-mentioned ], 
the log database containing the statistical data concerned is generated by calculating the statistical data of each 
above-mentioned analysis item for every provisions of classification of the above-mentioned log database. And at 
step S14, log database storing processing is performed and the generated log database is stored in log data Base 
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Memory 23 in the hard disk memory 13. Furthermore, analysis processing is performed using the analysis rule which 
was previously set up by analysis rule setting-out processing, and was stored in the analysis rule memory 24 at step 
S15 based on the log database in log data Base Memory 23. As data is specifically collected about the analysis item 
over the provisions of classification by which selection setting out was beforehand carried out from the log database 
in the information corresponding to the set-up analysis rule by which selection setting out was carried out 
beforehand, for example, it is shown in drawing 3 , it graph-izes. The data of this analysis result is displayed on CRT 
display 33. and a printout is carried out to a printer 34 while it is stored in the analysis result memory 25. 
[0036] Drawing 5 is a flow chart which shows the log database generation processing which is the subroutine of 
drawing 4 . In drawing 5 , first, at step S21, site extract processing is performed and the information on the site 
which corresponds from a log database is extracted. Here, a "site" points out the directory in which a file is stored 
in URL of WWW, as shown in the following tables. 
[0037] 
[A table 6] 

An example of a site http://www.example.com/ 

http://www.example.com/system/ [0038] Subsequently, at 

step S22, the number statistic calculation processing of hits is performed, the count which requires the top page of 
a "site" is totaled and calculated, and it stores in log data Base Memory 23. Specifically, it totals and asks for the 
line count which has requested the file names (index.htm, welcome.htm, etc.) of the top page of WWW according to 
the date, time of day, a site, Client IP, and Server IP. Moreover, in step S23, transmitting byte-count statistic 
calculation processing is performed, the sum total of a transmitting byte count is totaled and searched for according 
to the date, time of day, a site, Client IP, and Server IP, and it stores in log data Base Memory 23. Furthermore, at 
step S24, processing-time statistic calculation processing is performed, the sum total of the processing time is 
calculated, and it stores in log data Base Memory 23. Specifically, the processing time is totaled and found 
according to the date, time of day, a site, Client IP, and Server IP. By the above processing, log database generation 
processing is ended and it returns to the original main routine. 

[0039] As explained above, according to this operation gestalt, a controller 10 The provisions of classification and 
the analysis item of a log database required in order to analyze a log file Set up the definition information for 
matching with the item of a log file using the field number of a log file, and Web server equipment 200 is accessed. 
Transmit the data of a log file through a network 300, and it receives (step S1 2 of drawing 4 ). The log database 
which calculates the statistical data of each analysis item for every provisions of classification of a log database 
with reference to the above-mentioned definition information based on the data of the received log file, and 
contains a statistical data is generated (steps S13 and S14). Analysis processing is performed based on the 
generated log database, and the data of an analysis result is generated and outputted (steps S15 and S16). 
Therefore, since the program of server management processing is only installed only in server management 
equipment 100, and it is not necessary to install it in each Web server equipment 200 and it should manage only the 
program of server management processing of server management equipment 100, it can reduce management cost as 
compared with the conventional example which creates the program for log file processing for every application, and 
is easy maintenance control. Moreover, definition information is only set up to the format of various log files, the 
common log database with which the information on a log file was collected can be generated, and actuation of an 
operator is very easy. 

[0040] Moreover, with this operation gestalt, if an operator chooses default log file format as shown in step S3 of 
drawing 2 when Web server equipment 200 to set up is using default software, processing of assignment of the field 
number in step S4 is omissible. Thereby, actuation of setting out of definition information is simplified and operability 
is raised. 

[0041] Furthermore, in analysis rule setting-out processing of drawing 3 , it constitutes from this operation gestalt 
so that the provisions of classification in analysis processing may be chosen from two or more provisions of 
classification which were able to be decided beforehand using a mouse 32 and the analysis item in analysis 
processing may be chosen from two or more analysis items which were able to be decided beforehand using a 
mouse 32. Therefore, since an operator should just only choose the item of analysis processing, he simplifies 
actuation of item selection and is raising operability. 

[0042] With the operation gestalt beyond a <modification>, although it has connected through the networks 300, 
such as a network for in the company, for an in-house system, this invention may use the communication network 
of not only this but various communication lines. 

[0043] Although the processing program of the server management processing including log file management 
processing is stored in ROM11 with the above operation gestalt, this invention may be stored not only this but in 
the hard disk memory 13. and may be stored in the record medium which can be read by computer which are optical 
disk memories, such as CD-ROM, CD-R, CD-RW, and MO, and may be loaded to the hard disk memory 13 through 
disk drive equipment (not shown). 

[0044] In the above operation gestalt, although the server management processing about the log file of Web server 
equipment 200 is illustrated, since this invention is generated not only in this and a log file is generated not only in 
intranet server equipment or Web server equipment but in all applications, this invention is widely applicable to the 
server equipment which performs a predetermined application program. 
[0045] 

[Effect of the Invention] In the server management equipment to which two or more server equipments which have 
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the log file of predetermined log file format respectively were connected through the network according to this 
invention as explained in full detail above Two or more provisions of classification and two or more analysis items of 
a log database required in order to analyze the above-mentioned log file A setting-out means to set up the 
definition information for matching with the item of the above-mentioned log file for every above-mentioned server 
equipment using the field number of the above-mentioned log file. The means of communications which accesses 
each above-mentioned server equipment transmits the data of the above-mentioned log file to server management 
equipment through a network from each above-mentioned server equipment and receives, Based on the data of the 
log file by which reception was carried out [ above-mentioned ], by calculating the statistical data of each above- 
mentioned analysis item for every provisions of classification of the above-mentioned log database with reference 
to the definition information by which setting out was carried out [ above-mentioned ] A generation means to 
generate the log database containing the statistical data concerned, and to memorize to the 1 st storage, Based on 
the log database by which generation was carried out [ above-mentioned ], analysis processing about the analysis 
item as which it was beforehand chosen of two or more above-mentioned analysis items over the provisions of 
classification beforehand chosen among two or more above-mentioned provisions of classification is performed, and 
it has an analysis means to generate and output the data of an analysis result 

[0046] Therefore, according to'this invention, since what is necessary is to only install only in server management 
equipment not to install in each server equipment and to manage only the program of server management 
processing of server management equipment the program of server management processing can reduce 
management cost as compared with the conventional example which creates the program for log file processing for 
every application, and is easy maintenance control. Moreover, definition information is only set up to the format of 
various log files, the common log database with which the information on a log file was collected can be generated, 
and actuation of an operator is very easy. 
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* NOTICES * 



Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

"I.This document has been translated by computer. So the translation may not reflect the original precisely. 
2.**#* shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram showing the configuration of the server managerial system which is 1 operation 
gestalt concerning this invention. 

[Drawing 2] It is the front view showing the flow chart which shows the log collection rule setting-out processing 
performed by the controller 10 of drawing 1 , and the display screen at the time of setting out. 

[Drawing 3] It is the graph which shows the display screen at the time of setting out of the analysis rule setting-out 
processing performed by the controller 10 of drawing 1 , and an example of an analysis result. 

[Drawing 4] It is the flow chart which shows the log file management processing performed by the controller 10 of 
drawing 1 . 

[Drawing 5] It is the flow chart which shows the log database generation processing which is the subroutine of 
drawing 4 . 

[Drawing 6] It is the table showing an example of the log database stored in log data Base Memory 23 of drawing 1 . 
[Description of Notations] 

10 — Controller, 

1 1 — ROM, _ 

12 — RAM, 

13 — Hard disk memory, 

14 — Timer, 

20 — Bus. 

21 — Default definition information memory, 

22 — Setting-out information memory, 

23 — Log data Base Memory, 

24 — Analysis rule memory, 

25 — Analysis result memory, 

30 — Communication link interface, 

31 — Keyboard, 

32 — Mouse, 

33 — CRT display 

34 — Printer, 

50 — Controller, 

51 — Log file memory, 

52 — Communication link interface, 
100 — Server management equipment, 
200,200-1 thru/or 200-N — Web server equipment 
300 — Network. 
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-{!^.We bit-A*g£ff 2 0 0frlb*»y h?-? 3 0 
0 fc^LTit-^lrJi^g 1 0 OtaE&l'TStfB'*"*. 
£e>ic, n^-^^-x^fe^M 1 3) 

tt. ±fBg#anfen^r-r;i/©f ; -^icSc3v^ 
±f ES2Sa nfe^^lf^5:#^ UT, ±IBO * * 

-*©«#s«Bfc^ ±iE&##f«a©&&f+7 r -*& 

-^K-^^U 2 3C*fllWN5. S&KU Tr-ZWft 
Vm Ca-T^S l 5) ftOfx-^iMfflteSffiAffla 
Uf'^S 1 6) Tl*. ±13*^3*1^0^-*^ 
-^IcS^vnT, ±aa8flS®5MBKB©^^«)3aRS 

[0 0 18] HlKfcVvt, *Webt-;^f200 
Ji. (a) #SiLtfHTMLS:fflVxTaSia*l.fc^--^ / < 
- S^BWft. ^ -T-*-* Ki^aa^ 4:*©W e 

b*- /^6*©IM^S:«!ll«-t*fe«)ffl=i> 5 0 

4:, (b) i3>ha-^5 0tcg^$tu ^KWebit 
-^*2 0 0THfTUfeJWi (t^hU) %3>bO 

y^T-oi/^y 5 1 41, (c) n> ha-7 5 otcgf 
«SS*ii?— ^«SS6*i 0 04:*^ hV-V3 00^ 
btf- ^^et ci 4:*©)El*lR]©a > ff «:4f ^ 

jf^^i®^4f©«La5:l^f1"Siiffi'<>^-^ ;t 
5 2 4:8:411*. 6. 3>ha-5 5 0tctt. 

^Jx.t4W i n d o w s NTft4ffflO S±T'|l4f 
it- /^l^^T^'U'!r-S/3>^ , ai'*vAT'fe-&, ^1*. 

(a) Microsoft Internet I 
nformation Server, (b)Nati 
onal Center for Supercomp 
) uting Application, S.^, ( c ) O 



(5) 



racle Web Application Ser 
yer3. 0, N-;1/$*iT||?t3*i£„ Z.*i 

^<fcoT, aSWe b-9— AmU2 0 0T°mf LfcMM 
(fc*hU) it, Ofc<fc U^Stvrn 

^HW^U 5 ltCO^r^fcLTfJHttSft. 
■9— 0 03^e>©FTPfCj:SJiS%tc«fc»J, 

-7i-^5 2, *y r»r7-£ 3 0 O&tf, -9-— 

hO -51 OfClSBUcfta. 10 

[o o i 9] -9— A^taiggi o o«u cput«s 
hn -5 l o&fliAs. z.z.x% nyvu-? 

7i-^5 2, *f 0 OSr^LT^RODWe 

b-9— /W2 0 0JcSSWsn«. n>hn-5iotc 

3>hD-5io®±^^y (c-^^y^^y) 20 

Rtf-i%mm* ^vt LTSrf^-rs r am 1 2 1, 

©•5 s - # fct&Sfrf 5^- K-r^ ^i'^^y I3i: *V\*x 
2 Ofc/rbTg^StlS. ^B^fcttBTihS* 
-fv- 1 4^rr>hP-5 1 OlzmftZtiZv Z.ZH\ 

a- Kt^ * * ^ 'J 1 3 it*. ^ h^^m^g^ * 

^ D 2 3 itftrJb-JV* *E 'J 2 4 fc, WBffim* * U * 

Microsoft IISX^>^f— 
t ttgg Internet Inform 



^2 00 0-2 0 72 54 
8 

* 2 5ii&m5„ S^tC, n>ho-5 1 0{C«u 5?- 
*A±mm.h LT, K3 l&t>'V>7*3 2tf£ 

^^W3 3&tf:/y>*3 4#8SR3;tT,S. 

[0 0 2 0] 4gg£gfflT?& EI2<Z)^^^^ , S31C^ 
1-«fce>{c. #Web-y— y1gl2 0 0ftMnf7* 
;i/h©We b-9— A^D^A^LT, (a)Micr 
osoft Internet Informatio 
n Server, (b) National Cent 
er for Supercomputing App 
lication (NCSA) , M (c)Orac 
le Web Application Server 
3. 0, 03^V7N7i7 CKT. <r-7itfrY<DV 
7bV3i7£^?. ) tfmfe£tlT^2>i)\ fffi©^© 

TPcoi&ttQSM-tztZC) 1 a^©^ -;bK#-§-© 

I P7 K Is7.\f7j -Jl K*9 1 T'fe »J, * ©i— y- 

&T©*fC;}3^T, ^5-TT^hi:«, 011?0^bT 
Cvfe^iW. #We bf-;^f2 0 OfCg^ftTT* 

[002 1] 
»13 



KD^77-f;L^S; (Mi crosof 
ation Server (IIS) t' 



•9— 



z2y¥=L-%& 

*ysi$ra (ms) 



%ft^yy(Di P7KU7 

WWW (W3SVC) , FTP, 
Gopher 
■9— Aigfi© n y tf 3. - # £ 
■9— A3£g©I PTKL/^. 

-9— ; *36H*» 5> m%rc v > {ciUff 1- & 
flffltt 

Witt. WVMDV->(XteZ 
WWW©M&T- £> ft x 5 - =J - K 

ffllAJ*. 2 0 0: ggSjSfim 



(6) ^2000-207 2 54 

9 10 

4 04 V >fc E 

Windows F N T3fig©=l- F 

WLWC POST, GET^if 



im 1 1 s^*>^-Kay7r>f^*®ffi*« 

(I) 172.23.xxx.l28,-,98/ll/26,0:51:35,W3SVC,DMC2,172.21.yy.226,203,380 

,877, 200,0, GET, /enegi /Gif /mente . gif ,- , 

(II) 172.23.xxx.l28,-,98/ll/26,0:51:36,W3SVC,DMC2,172.21.zz.226,94,453, 

2244 ,yyy , 0 ,GET , /Scripts/counter/ count . exe ,df =enegi . dat , 

(III) 172.21. xx.166, administrator,98/ll/26,4:00:43,MSFTPSVC,DMC2,-,0,2 

0,0,zz,0,(1741]USER, administrator,-, 

[0 0 2 2] * * 

NCS AlS^a ff-y y <i 

[dd/mni/yyyy:hour:iDinutes:seconds GMT offset] 

2 0 0: gg»& 

4 0 4 : Rlij^-SWfc^fcif 

Mill ®^©-y--rx*cif 

•9— wwwiJ--;^& 

(I) 172.23.xxx.128, [19/Sep/1995: 15: 19:07-0500] , "GET/images/icon.gif H 
TTP/1.0" ,200,1656, "htt P ://aboutus/" , "NCSA Mosaic/2.7bl(Xll;IRIX5.3IP 
22) Iibwww/2. 12modif ied" 
[0 0 2 3] *40* ms) 

Oracle Web Application Server3. 0D^77 
-f«S (Web Application Server 3. 0 (Oracl 



*7-f 7> h©WEI D SBSEWS^f^^'J ^ L,fc^© 
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[dd/nun/yyyy:hour:minutes:seconds GMT offset] 

2oo: mmh. 

4 0 4 : Wt%s<.-i/tftji\,\tei? 



t-;t^ifflDNSi& 
-9— ytStR©I P7Kb* 



tariff* (sasmo 



8§ftK:£Lfel$IBI 

•9— if ^«ffl3 - KlcflJns *i3 rj ;* y h 
POST, GET&£ 



CS) Oracle Web Application Server3. On 
9~7 74M&£fiM (±IB7-f-^/K**^ *5>f7>hIP, a.— BH# 

(I) 192. xxx.29.35-[03/Jun/1998: 15:09:07+0900)" GET/og-img/help ico.gif 
HTTP/1.0" 200 891 

(II) 192.168.yy.35-[03/Jun/1998:15:09:07+0900) "GET/og-img/title a.gif 
HTTP/1. 0" 200 8349 

(III) 192. 168.zz.35-[03/Jun/1998: 15:09: 15+0900) "POST/garireo/plsql/sho 
hin.a kiki HTTP/1.0" 200 1623 

[0024] -tbT, ±M2>-D<Dt 1 7*)\,Y-<DV7VV * [0 0 2 5] 

xy&c*fi-&^-7:*;b vmmmi^xromz^-t^ e> tan ] 

fC -5=7 *;b h^^^E U 2 1 JC^ftlfittSns. * 40 



I I s 



NCSA 



Oracle 



+>- A I P 

MP 

Btf 

BB# 



7 
1 
3 
4 

13,14 



2 
3 



1 2 
2 



4 
5 



(8) 



2000-2 0 7 254 



13 



14 



1 0 



[0 0 2 6] ^4 fr<bW<bfrte£ -5 7*7*fl'h&k 
flffll^^U 2 lft®7 : :7*;bh^^Kfc , ' v ^ «• 

«fc«ttl/rv**. #|QBBMm±. KfeUfcvWe b 
■9— /mU 2 0 0 tff7 * ^ h © V 7 b 9 XT L 
TV*5»£fcl±, @2(Z)^T-^^'S3tc:^-r«fc'5lC> 

mi/cRg***^ 2 2 tcigsrrs. i*uc*y, fit 

[0 0 2 7] a-Ft-V*?*^U i sfcfcvvr, KJg 
tiftg* u 2 2 tt, a ^iR»;i/-;He^$ tis a 

(a) Stf, (b) B#m (c) f-AIP, (d) * 
7^7>MP, (e) *M VtF?&&aRZ*» & 
«PSB £ UT, (f) Kt»NR ( S ) SMI > W ^ 
(h) ^l$W#^tf>3W*3*VtV*«>. £*T 

[0 0 2 8] 2fs^e&£ffirt*l£, HBOD^f-*^ 



* 1 0 0*Ht^.T*jJ:Vx. 

[0 0 2 9] H2li, @103>hn-7l OT^feffS 

SIT', D^r^^WWe b-9 "~" ^fi 2 0 0 
©I P7h*b^S*-*-K3 1 feJBwTAAU 
10 >v7*S2tn^77^;i/5:Web -9— /^SB 2 0 0*6 
■9— /^ggl 0 0KLFTP©Jg*"T?<K£"**fc£^ 
We b-9— -rtSS«2 0 0 \Z7Vtt-$Z>h%V) I D&tf 
,^9- jffcdp.-jtf- K3 1 &JBwtA2r*"5. 

f7^h©V7f7X7©iiiii ±34© 3 o©-?? 
*;bh©V7 t><7X7<£>4 I 7^£>j§iRi"£. — ^ 

20 T> 7.7-vZfSA\zmti a 

[0 0 3 0] *T-y7*S4K:;l3Vvttt, f7*^/h©V 
7tM?x7J^fflV7bCx75:We b-9— ^SSt2 0 

ojweffli/t^sfcsic, n$f7r>r;w£*©£SfflW 

lZtt*fr#*fgiB#^ FTP T«S ft* i: *©r- " 
WTtt, Btf+W&Wv BB#T-*i§£U ££T?, H«WC 

[0 0 3 1] 
[*5] 



"Wfe& (POST/GET) ISf^f*" 
: "GET/images/water.gif" 



"SW&fe (POST/GET) SflF***?/^*-*" 
-+#| : "P0ST/cgi-bin/conuntcgi?nuraber=2" 

W (POST/GET) ^Dh=3;i/^," 
-»09 : "P0ST/cgi-bin/countcgi?number=2 ,HTTP/ 1 . 0" 

[0 0 3 2] ^SA^m^'o^ D-9 10tt. U*7T^V®Wm ^^JS 

f ,7-s3»«7tnii .f^s 5-c, «« atifefoawitt. tow*** 'J 2 2^^. 
^y a --n/fc«ftu oKWJ^twt ^ so [0033] ssii, @i©3>hn-7iot^ 



(9) 
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-T-jt^-xfeffitm (xfyzfs l 4) i^Ttfci 
(C, ffoT=bJ:v^ &#<D*§£-fC&, EI3(C^-rOK$: 
* 'J «y -r-*7>#r#yi U-f-v^S 

l 5 ) «0SfJS nTH 3 <B£WKj5V* j; e> &£#fi@jll# 

CRT5 s -f^7 p W3 3Kafta%anS4:i;%KU ^'J> 
*3 4KBmto&3ft5. 

[0034] as Kfe^T, ^ff;i/-;ng^OseT*^ 10 

*8»(8IHS:*-jK-K3 1 &«wcA*1-*i:£fcfc. 

$ffi&#8ffi(D:Sg£:v?;*3 2 &jgwc? 'J 
tCfcyRjfr**. E|3T'li, *©E3AXtWMt*«Btea 

IMh CfcH8&£J!ST?t±> WWWCURLCDCfJT'^T-^ 
MflBttSftS-r-f h y Srffi-t. FTP -e*sat3ft 

s^gnt. y*x*M3Hj&u nwte&+sw£ 
^ u 2 4 tcttMs n*. 

[003 5] E!4li, HlOD=l>hn-51 0T*^T§ 

«isanfe^i^T»s^^*i«wwfaft. i&jtigjt 

JMRIWBi&l&ff-fS. Attfetcfct. =2>h D-7IO 
l*> I&StSW «t V 2 2 tc&fcte ftfcKfcflWics^v \ 

T, #We bi^—y^M2 0 0iCT^ir7.UT, ±fEn 30 
^'77-f;b©f-i!S:> FTPtCty, #Webt-/<* 



#gS20 0 0-2 0 7 2 54 
16 

*!£B2 0 0fr£>*<y b9-#3 0 0 *-frVZ-y—A*gm 

ami o ojoeai/csflrrs. &^r% x^y^s 1 
tifcn^^r-r^^-^fcs-^^T, ±§Bies$ftfe 

Bmz, JJBSMMffiB g CDiWSff^- * Straw* 3 c 
-g-l/C, J^y^S 1 4T% D^f-^^-^ 
^^y l 3 ft©n y-r 1 -- #/•<-;*.;* =ty 2 3tc^» 

2 3ft©D?7 r -#'<-;UCg^T, jfefC^Mff^/ 
-MB£^T?»*SftT£*f;i/--/ioi t U 2 4 {OKM 

^*^nss$tifc^^sg{c*«-*, 

* t£ dffigftbl ^ U 2 5 (CttM3 *VB fc £ % 
fC, CRTf-f7yW3 3t:^L)!j07 r| J^^3 4 

[0 0 3 6] H5J4. 04 0-y-^;i/-^5 1 >T*S>-5O^5 s 
-f^-^«a?:^t7n-fv- hT'$>§„ 05 

? b y 

[003 7] 
[*6] 



h t t p : //www. example, com/ 

h t t p : //www. example, com/system/ 



[0 0 3 8] #^T*, Xfy7"S2 2T'H fc^MBStt 

tfflfawaai &*ff u r-y-j hi <ohv 7k- *? 

■tSEffiCSriMH-OTtWLT, a^-^-^^y 40 
2 3 KttHfTf &. AfWSWCt*, WWWCD h y J?© 
7r-f >>k£i (index, htm, welcome, h 

K ^7^7>hIP, -9— A* I PCDSMcJMtLT 
T.-r^7 , 'S2 3lcfe^T, aMfyVhSt 

tfLT#«>, n^-^^-^^^iJ 2 3CIM1W-6. 

ae»jc *-5 L «y^s2 4T% ^^r^tti^:^^ 



y 2 3 icflrtfrfa. A#»»cti. ^^S, 

M> -y-W I P, PODHNc-gff- 

[0 0 3 9] J6*±SWBLfeJ:-5»C, *HS^^cj:ft 

AmM2 0 OtCT^iz^LT, n^T^l/CD^-drS 
h 9-^3 0 0S:^bT«JJSLT5ffl|b (04©^ 
f>v7*si2) , SWBaftfcny^r-f^o^-^lca 



(10) 

17 

SI 4) , ^JtStlfeD^-^^-^t-S^^T^tFf 

*BI&£fTl/T, 4MfflS»©^-f 
(Xr^S 15, S 1 6) . ftot, V- AIMS 
<D^n jf^ Ate, -9— /*ra£S l o o iccD^-f >x h 

-;i/-T-5fc*^T% #We b-tf— /5£M2 0 OlC-f h 

-;i/-rs&»fc<. *w<«iiaiioo<D*-;VI 

^^^□^A©^&1I^"f;rui<fcv ,i ©T*, D ^* :7 

■i ;i/©«^#il^£*ifc£Ui© D * ^-**%J& 

[0 0 4 0] *HJS^ffiT'^ KSLfcHWeb 

Tv^^icte, 02©;*5 t y:7*S3Kj3Vr«fc3»c, & 
-r y 4 Cfi»57-f-^ K»^0*iJ£ffl«a%4f% 20 

[0041] £^ic, *m/®&mz'& ®3©^;i/- 
^^©^flr^g^^* 3 2 feJBwtaHW-* £ 

[0 0 4 2] <3S^J>RJ:©3S)^JBT?tt. ttft^X 
0 OfccftUTg^bTV^tf, atcWJUttSttfCRb-r, 

[0043] vxt<Dmmmx*& utvyA ;vtwt 

S&-£*f9— A i WmSHM09HM^U ^ Ate, ROM 1 
f-f^^u i 3ftic|ftNii/t ! b«fc^u CD 

-ROM, CD-R, CD-RW, MOfc£©3te?-f * 

[0 04 4] J^CDaQteBJBlCfcVvtli. Webt-A 
a£g2 0 0©D^77-<W:oV^©t- Aigmi&Z: 

te-f:/ S-tf— A^SWe b*-/^8tKI»& 

T, i-^TOTT^li'r-^H^C^'tS©"?, 

[0 0 4 5] 
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saw©**] RtP5ti>fe«t-5^*wtcj:tiii. * 
mam?** * <-^om&(oftmmikmm 

ft£p^7 7>f;i;©-r-#K*^T, ±IBRi£3*ife 

3 ^«>»RSftfca^S JjBfflR©£*r 

£g © o 1=>©^#>jgfRS *ifc^«F«B KBH-tS^MWQS! 

[0 0 4 6] t^oT, jv&ym 
(Dzfu Ate, -y— y^flssaw-©*Hr h -^i" 

©^tt^^«bTffi#T'fe5„ 

[mi] ^ssw^s-^je^a-e***- 

[02] Hi©3>hn-5i 0T'^f3tiSni7*J|x 

[HI 3] Hl©n> 1 0-e^TSti-&^;i' 

40 -^1^^©!^^©^®®^^^*©—^^ 

[04] Hi©z3>ha-7 l 0T-^I?t£*i6O£*7 
7^;mM^t7n-fi?- hT'fe^. 
[115] Ei4©-y-/;i'-^>T*&-5a^*7 :i -^ / <-^ 

[06] glCDyf-^^-^^'J 2 3K&$|£ 

[«W«)BWIi] 
50 1 l-ROM, 
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12- RAM, 

13- A- hr-T^^^^U. 

14- *>fv-, 
2 0-;U, 

2 1 -T-pitJihfeimmt^v, 

2 2-t83gfiP8*^y. 

2 3 • • • □ *f7- # ;* U , 

2 5-^tf^^^'J, 

3 0-ii#>f>^-7i-X, 
3 1 •• K, 



#^2 000-207254 
20 

3 2-V<t7*, 

3 3-CRT-r-r^yi/^f, 

3 4-:/y>*, 

50-a>hn-7, 

5 1-n^77-f;W=E'J, 

5 2-j®ff>f 

1 o o--y—A { mm&Ms 

2 0 0, 2 0 0- 17JM2 0 0-N-We b-y--;^ 



10 3 0 0-*yHt7-#„ 



[04] 



■ . io^jlL ^ -. _ — 

" H ROM | 



RAM f«— 


21- 








23- 




24- 




25- 





200 

<Web*-/<KE200-1 



CRT 








V<*20 



I ^ 


<50 
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,200-N : 
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S15 
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[02] 
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•»-/<p :[x)Oocxxx 



-S5 



OfcB 

pgjfll fee 

Qtgal IB 




7< -yuKctfcafr&ftfeta. 



Btt 



B» j 3 f -g^ : [[dd/mfn/yy±h:mmlM 



, ,|-GET C teTpara/neleftvi 

at8/w >a Qj 



I &jftftg J 



S21 
S22 
S23 

S24 



I 



MflBBiattimsi 
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S$ffl 2000-207254 



[H3] 



KStJtBfSJ ^ yy/mrn/dd | H yy/mm/ddl 

iet& -.it? ha cKam/w h» 

0*9— '< 
oik h 

:|XX.XXXJCX.XXX 1 
iK h :j /topics/new/ "[ 




?9<?> HP 



[06] 



O f Tr — * * *l 











Btt 


■9JN 




T> MP 


Y 








1998.12.1 


13 : 01 


XXJCXJOC-XX 




/toptes/new 


2352 


456312 


03* 21' 


199S.12.1 


13 : 03 


yyyyyyyy 


bb.bb.bb.* 


/home 


459 


33119 


05* 10* 


199ai2.1 


13 :"05 




cc.cc.cc * 


/}cb/new 


32113 


21567 


55' <U' 
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